Skip to main content
Your BrikSync PropOS account holds sensitive data about your properties, tenants, and financial records. We strongly recommend enabling all available security features to protect your account.

Two-Factor Authentication (2FA / MFA)

Two-factor authentication adds a second layer of security to your login. Even if someone obtains your password, they cannot log in without the second factor.

Enabling 2FA

  1. Go to Settings → Security.
  2. Click Enable Two-Factor Authentication.
  3. Follow the setup steps to connect an authenticator app such as Google Authenticator, Authy, or 1Password, which generates one-time codes.
  4. Save your backup codes in a secure location. These can be used to access your account if you lose access to your authenticator app.
Store your backup codes securely — offline or in a password manager. If you lose access to your authenticator app and do not have backup codes, account recovery will require identity verification and may take time.

Disabling 2FA

You can disable 2FA from Settings → Security → Two-Factor Authentication. We do not recommend doing this unless you are switching to a different authenticator app.
Two-factor authentication requirements are determined by your role within the organisation. Contact your Admin if you have questions about your account’s 2FA policy.

Password Security

Changing Your Password

To change your password, use the password reset flow: go to briksync.com/login, click Forgot Password, and follow the steps sent to your email address. This is the standard way to set a new password for your account. Your password should be at least 12 characters and include a mix of uppercase letters, lowercase letters, numbers, and symbols. A password manager is recommended for generating and storing strong passwords.

Forgotten Password

If you cannot log in, go to briksync.com/login and click Forgot Password on the login page. Enter your email address and we will send you a password reset link. Reset links expire after 60 minutes.
Use a unique password for your BrikSync PropOS account that you do not use anywhere else. A password manager such as 1Password or Bitwarden makes this easy.

Session Management

Viewing and revoking individual active sessions is coming soon. In the meantime, if you suspect your account has been accessed without your permission, reset your password immediately using the Forgot Password link on the login page, and contact us via the contact form.

Email Address Security

Your email address is used to log in and receive important account notifications. To change your login email, use the contact form — we will verify the change with you and confirm once it has been updated.

GDPR data requests

You can export your personal data yourself, and you can ask us to delete your account. The two work differently, and it is worth knowing which is which before you start.

Export your data — immediate, self-service

  1. Go to Settings → Privacy & Data.
  2. Click Download My Data.
  3. The file is prepared straight away and a download link appears on the same page.
The export covers the personal data held against your account. You can request a fresh export once every 30 days; the link stays available on the page in the meantime.

Delete your account — a request we action for you

  1. Go to Settings → Privacy & Data.
  2. Click Request Account Deletion.
  3. The request is recorded and shows as Pending on that page.
Deletion is not instant and it is not automatic. Our team carries it out, and we complete it within 30 days at the latest — the period the GDPR allows. There is no queue that empties on its own, so if the status still reads “Pending” that simply means we have not reached it yet, not that anything has gone wrong. If your request is urgent, or you want only one specific thing removed rather than the whole account, tell us through the contact form and we will prioritise it.
To request removal of a team member’s personal data, use the contact form with the relevant details. Every request is logged so we can show when it was made and when it was completed.
Account deletion cannot be undone. Here is exactly what happens.Removed: your personal details are erased — your name, phone number and profile picture are replaced with a placeholder, and your account is deactivated so it can no longer sign in.Kept: business and financial records created through your account — properties, units, leases, payment records and tenant records — are retained. They belong to your organisation and we are required to keep financial and contractual records for the period the law sets. Entries in the audit log are also kept, because an audit trail that can be edited after the fact is not an audit trail.If you need something specific removed, use the contact form and tell us what it is.

Recognising Suspicious Activity

If you notice anything unusual — unexpected logins, changes you did not make, or emails about activity you did not initiate — take these steps immediately:
  1. Reset your password using the Forgot Password link at briksync.com/login.
  2. Review the Audit Log (Admin accounts) for any recent changes.
  3. Contact us via the contact form if you need further assistance.

BrikSync is in private beta and not yet incorporated — we are working through that process and building a small founding team.
Last modified on August 21, 2026